The Breakdance plugin for WordPress is vulnerable to unauthorized access of data in all versions up to, and including, 1.7.2. This makes it possible for authenticated attackers, with Contributor-level access and above, to export form submissions.
Metrics
Affected Vendors & Products
References
History
Fri, 22 Nov 2024 12:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Soflyy
Soflyy breakdance |
|
Weaknesses | CWE-862 | |
CPEs | cpe:2.3:a:soflyy:breakdance:*:*:*:*:*:wordpress:*:* | |
Vendors & Products |
Soflyy
Soflyy breakdance |
MITRE
Status: PUBLISHED
Assigner: Wordfence
Published: 2024-08-01T06:47:05.356Z
Updated: 2024-08-01T14:06:54.699Z
Reserved: 2024-05-24T17:42:13.595Z
Link: CVE-2024-5331
Vulnrichment
Updated: 2024-08-01T14:06:51.638Z
NVD
Status : Analyzed
Published: 2024-08-01T07:15:02.783
Modified: 2024-11-21T23:07:26.067
Link: CVE-2024-5331
Redhat
No data.